SRE-59 ensure dev modulesare not enabled

Policies/DevModulesEnabled.policy.yml

@@ -0,0 +1,11 @@
+title: "Dev Modules enabled"
+name: algm:DevModulesEnabled
+class: \Drutiny\algm\Audit\DevModulesEnabled
+tags:
+  - Dev
+description: |
+  Making sure no dev modules are enabled on prod.
+success: |
+  Success: No dev modules enabled.
+failure: |
+  Warning: There are some dev modules enabled: {{ modules }}, please check they are not enabled in production mode.

src/Audit/DevModulesEnabled.php

@@ -0,0 +1,39 @@
+<?php
+
+
+namespace Drutiny\algm\Audit;
+
+use Drutiny\Audit;
+use Drutiny\Sandbox\Sandbox;
+
+
+class DevModulesEnabled extends Audit {
+
+  public function audit(Sandbox $sandbox) {
+    $dev_modules = [
+      'browser_refresh',
+      'coffee',
+      'devel',
+      'hacked',
+      'kint',
+      'link_css',
+      'rules_ui',
+      'stage_file_proxy',
+      'reroute_email',
+    ];
+
+    $info = array_keys($sandbox->drush([
+      'format' => 'json',
+      'status' => 'Enabled',
+      'type' => 'Module',
+    ])->pmList());
+
+    if (empty(array_intersect($info, $dev_modules))) {
+      return TRUE;
+    }
+
+    $sandbox->setParameter('modules', implode(",", (array_intersect($info, $dev_modules))));
+    return FALSE;
+  }
+
+}